We have an exec admin that supports our CTO and CRO so we want her to be able to search bills and see when they were paid. However, we don't want her to see any Legal or HR bills since they contain confidential info